ipsecctl(8)


provides an abstraction layer to IPsec config
pf-like syntax, very readable
reasonable defaults
talks to isakmpd(8) through FIFO for automatic keying
configures static keying in kernel through PFKEYv2
obsoletes isakmpd.conf

isakmpd is still required for IKE
ipsecctl is basically a configuration frontend for isakmpd

IPsec IS SIMPLE!